CVE-2024-43720

Summary

CVE-2024-43720 is a DOM-based Cross-Site Scripting (XSS) vulnerability affecting Adobe Experience Manager versions 6.5.21 and prior. This issue allows attackers to inject malicious scripts into the victim's browser by manipulating the DOM environment. By exploiting this vulnerability, an attacker can execute arbitrary code in the context of the victim's browser session, potentially leading to information disclosure or unauthorized system access. Exploitation requires user interaction, typically through following a malicious link.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.